Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          CjFplm4QclxmunzcjvOFNK8EobsC2Bruje+7n2VeAOM=
Subject key identifier:   84:75:9A:02:7E:60:C6:83:B6:41:B6:72:28:2B:61:56:18:36:9E:F2
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       01962F067D20AB798B37A1EF1C712DD29C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          0E57
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
                          2: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
                          3: ZlCnHi66TR2nKxqrLkFiA9RkNkM.roa (hash: qhU5xO91nkS+pSrqCSMtrI5jpe0dur9jR7IHIGUVNR4=)
                          4: _LPm3i5_hUz8FhDIask4rlpIUs0.roa (hash: r2G46RMDOZoiXQ5FImU6QYgASKS2Qdype2JjkN9ACj4=)
                          5: hI46h1AVRwpuweR_qkjPXkw0O2k.roa (hash: iVTQ7975a1sIHisxSW/MFIVcaf8MKzOpFRhCojtRDhg=)
                          6: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: O07QQns0Maz4NLAx3iKWO1duCNN11rozZ7AuAnscxfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7d:20:ab:79:8b:37:a1:ef:1c:71:2d:d2:9c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=84759a027e60c683b641b672282b615618369ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:31:3a:db:cb:bf:d0:f1:83:1e:88:19:50:
                    a4:44:d2:71:38:42:fa:33:f2:46:fe:71:3f:cd:35:
                    ad:0b:2a:8b:7f:6d:7c:2b:43:37:12:12:2d:8b:4d:
                    b2:79:4d:6e:56:55:41:2f:02:4b:09:e7:b7:f0:00:
                    3c:f8:35:bf:84:57:63:9f:ac:88:bc:76:0b:f5:20:
                    61:43:90:cb:9b:d6:62:2b:43:19:93:9b:67:ee:c1:
                    1b:ea:bf:a0:f1:74:b1:4a:66:bc:f9:f9:7c:c1:d8:
                    7a:48:86:86:82:cf:a0:79:30:14:4b:69:83:84:e8:
                    bb:1a:d3:1e:28:a0:71:ce:4f:b8:dc:3f:b2:2a:59:
                    21:e5:5a:db:94:4d:44:31:ec:70:41:ce:58:46:ae:
                    33:d5:88:c9:fd:c2:71:2e:cc:bc:07:65:6e:00:31:
                    d2:ce:75:f3:c9:e2:e2:1c:ac:97:ed:5d:0d:75:ee:
                    18:44:70:7a:00:ac:95:f6:78:fd:37:6f:93:9a:93:
                    2e:8f:28:2f:f6:d6:8a:c8:61:e6:c6:e3:1f:66:78:
                    cf:86:86:a5:5a:d7:c0:e2:05:32:06:1f:43:2f:35:
                    b3:bf:6d:a1:6a:b5:cb:d6:f3:21:fa:62:89:95:90:
                    f3:28:a0:78:21:f7:53:42:7a:32:6a:dc:a9:d9:d7:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:9A:02:7E:60:C6:83:B6:41:B6:72:28:2B:61:56:18:36:9E:F2
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:48:e4:61:34:96:5c:21:61:85:a7:bc:21:17:72:20:c4:
         34:c6:be:a6:57:f7:4f:2b:ff:6d:2c:ba:3c:e2:4a:a6:59:be:
         29:d3:2d:19:f5:e6:fb:66:da:73:b2:88:29:68:66:65:58:84:
         2f:89:37:80:a4:af:07:cc:f4:7e:1b:2e:ee:69:75:39:97:bd:
         df:16:2a:60:f1:cb:4b:8f:f6:3e:53:b8:0e:10:8d:ba:6a:34:
         b2:0f:2e:0e:42:61:b2:77:f4:0d:6f:60:ef:39:71:0c:5e:ec:
         95:a6:77:45:6d:19:b8:07:00:01:8a:bf:79:75:ae:87:b3:c2:
         94:c1:3d:c0:28:66:a9:79:4f:22:31:a0:b8:f3:62:53:a3:f1:
         32:9f:79:d3:eb:56:95:0d:35:7f:87:29:5c:a3:69:11:fe:36:
         ea:98:e0:db:50:71:77:30:6d:8f:e3:f6:31:a8:af:6e:12:21:
         a6:25:c4:00:85:04:d7:a0:8e:77:12:ff:d7:31:06:07:40:62:
         c6:62:b1:7a:e2:68:e6:de:46:d2:08:81:69:1b:b0:ed:5f:3f:
         df:2b:0a:d3:a6:e4:45:21:03:0e:c6:eb:1f:41:5f:82:db:72:
         07:96:95:57:45:a9:70:ff:36:0d:ce:d6:62:50:46:f9:20:66:
         1d:c4:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----